lee/rea
1
0 Fork 0
mirror of https://github.com/morluto/rea.git synced 2026-10-23 23:22:08 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
fb6785dcafe5d4ab59eaabf503801d8e8a9767fa
rea/docs/verification/javascript-native-handoff-identity-2026-10-15.json
T
YsopwnableandKaoru0822 c7f6b8bad1 fix(javascript): bind native handoffs to canonical byte identity 
Require the native node owner's content digest instead of borrowing an
observation artifact digest, which can identify the containing ASAR. Keep
unavailable nodes and their path/provenance/partial facts in the trace,
without a false actionable target or native Evidence link. Remove the old
fallback and allocate the query index only for eligible native targets.

Verify real public CLI/stdio MCP workflows, known/missing companion inputs
and shipped Joplin controls. Preserve reproducible scripts, source pins and
compact correctness/resource/token records without archiving applications.

Fixes #3926. Part of #4027.

Co-authored-by: Kaoru0822 <208281322+kaoru0822-kitauji@users.noreply.github.com>
2026-10-15 17:08:49 +00:00

1053 lines
43 KiB
JSON
Raw Blame History

{
"base_revision": "9f8659e0536e4e50a438f5b9d5661f3c9624f6ac",
"scope": "Canonical native byte identity for actionable feature-trace handoffs; static shipped Joplin, not native provider/application behavior",
"runtime": {
"platform": "Linux x64",
"node": "24.18.0",
"npm": "11.16.0",
"tiktoken": "0.12.0",
"tokenizer": "cl100k_base"
},
"acquisition": {
"repository": "laurent22/joplin",
"tag": "v3.7.21",
"published_at": "2026-09-25T21:31:12Z",
"url": "https://github.com/laurent22/joplin/releases/download/v3.7.21/Joplin-3.7.21.AppImage",
"asset_bytes": 201462481,
"asset_sha256": "5d202dcaca31e14206826aa3f04125e7c218dbc3dc3d98479d811efbd6b856c1",
"extraction": "7z 26.02 read-only selected extraction; no application/provider executed; AppImage SquashFS at offset 944632; one trailing-data warning, exit 0",
"files": [
{
"path": "app.asar",
"bytes": 233575014,
"sha256": "767df409b18effe60421fbefcca873de237c7e813eac744ecdeebbc5e825a33a"
},
{
"path": "app.asar.unpacked/node_modules/keytar/build/Release/keytar.node",
"bytes": 76960,
"sha256": "0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a"
},
{
"path": "app.asar.unpacked/node_modules/onnxruntime-node/bin/napi-v6/linux/x64/onnxruntime_binding.node",
"bytes": 384040,
"sha256": "a7191fbfe8045d4d5d312e5ecd8f5dd6970e804dd340c98be8a0af8daf7908cc"
},
{
"path": "app.asar.unpacked/node_modules/sqlite3/lib/binding/napi-v6-linux-glibc-x64/node_sqlite3.node",
"bytes": 2158008,
"sha256": "1f8cc72dfb50f0c54b04dd7a709ef5ef89b2b1f3b063270646bd12c81173b2e8"
}
]
},
"inventory_header_observation": {
"files": 6324,
"unpacked_entries": 46,
"unpacked_native_addons": 3,
"selected_static_sources": ["package.json"],
"native_companions_staged_for_available_control": 3,
"other_unpacked_entries_not_staged": 43,
"application_execution": false,
"native_provider_execution": false
},
"baseline_source_sha256": {
"package.json": "56ecf79edad7f36f425288d80dee14247c7f24e3c7eeec40f95d9b8a62b0880d",
"src/domain/javascript/javascriptNativeHandoff.ts": "ce46a23c936940f1b57cf3c79082438ac7ba95652d671ff1befecbc24a6a2d7a",
"src/domain/javascript/javascriptFeatureTrace.ts": "b2122e4ae026e176dca775351101ad2ce876e3bf804f39554a2d9344d8fe1fd1",
"src/application/javascript/JavaScriptArtifactGraphStructure.ts": "1afdeda88a998133eb2de2cb26cbcffdd51c85f302c2797158e2944874326449",
"src/domain/javascript/javascriptApplicationEvidenceSchemas.ts": "b5229e409aa0b2a9e1470254ca93ab987ca26f1bc9e9f94ab44e89c749df59ca",
"src/domain/evidence.ts": "81e434981572df8c5af1dd5add04bcafc1fbfbf7b9a8dcc5a4b18bbd121cb3c4"
},
"baseline_verifier_and_regression_source": {
"base_revision": "9f8659e0536e4e50a438f5b9d5661f3c9624f6ac",
"source_sha256": {
"scripts/verify/javascript/native-handoffs.mjs": "9950693500d94aa28b01b2e7e8b8e3e799064f3fc53eef10a65d129f4c6c1f54",
"tests/boundary/mcp/javascriptNativeHandoffIdentity.test.ts": "ff247a8fb2189bf40cab604af23fc792eee939ff93f6c0f8e153a28405b3bdd9",
"src/domain/javascript/javascriptNativeHandoff.ts": "ce46a23c936940f1b57cf3c79082438ac7ba95652d671ff1befecbc24a6a2d7a",
"src/domain/javascript/javascriptFeatureTrace.ts": "b2122e4ae026e176dca775351101ad2ce876e3bf804f39554a2d9344d8fe1fd1",
"src/application/javascript/JavaScriptArtifactGraphStructure.ts": "1afdeda88a998133eb2de2cb26cbcffdd51c85f302c2797158e2944874326449"
},
"verifier_optional_architecture_correction": {
"current_sha256": "bfdc235cc38a519a39e8b2e772d55259f371ccb15058e6fd241ee5ac05dfef82",
"explanation": "Omitted the internal factory optional architecture field instead of passing null. All four real-case normalized simulated Evidence records proved byte-identical; runtime tool requests/results unchanged.",
"normalized_input_equivalence": [
{
"mode": "available",
"kind": "container",
"evidence_id": "ev_a67558e076894c3b7d339257765f22d66987cbcef411bf92d1dc50db2f4521ca",
"normalized_bytes_identical": true
},
{
"mode": "available",
"kind": "native",
"evidence_id": "ev_c1bf000c14a18445db1f834b1c6019ae04725dd948951d5b5079184b4524e8d7",
"normalized_bytes_identical": true
},
{
"mode": "missing",
"kind": "container",
"evidence_id": "ev_a67558e076894c3b7d339257765f22d66987cbcef411bf92d1dc50db2f4521ca",
"normalized_bytes_identical": true
},
{
"mode": "missing",
"kind": "native",
"evidence_id": "ev_c1bf000c14a18445db1f834b1c6019ae04725dd948951d5b5079184b4524e8d7",
"normalized_bytes_identical": true
}
]
}
},
"final_source_sha256": {
"package.json": "cdb2fb0fd3a88790d921aadb560cac382fa360c821a2c3f6960bf75eff292ee8",
"src/domain/javascript/javascriptNativeHandoff.ts": "6a0c6277dcbd7a5b79bf926d2191afe69af79993bb30c8823c833ccfd946c68c",
"src/domain/javascript/javascriptFeatureTrace.ts": "b2122e4ae026e176dca775351101ad2ce876e3bf804f39554a2d9344d8fe1fd1",
"src/application/javascript/JavaScriptArtifactGraphStructure.ts": "1afdeda88a998133eb2de2cb26cbcffdd51c85f302c2797158e2944874326449",
"src/domain/javascript/javascriptApplicationEvidenceSchemas.ts": "b5229e409aa0b2a9e1470254ca93ab987ca26f1bc9e9f94ab44e89c749df59ca",
"src/domain/evidence.ts": "81e434981572df8c5af1dd5add04bcafc1fbfbf7b9a8dcc5a4b18bbd121cb3c4",
"scripts/verify/javascript/native-handoffs.mjs": "bfdc235cc38a519a39e8b2e772d55259f371ccb15058e6fd241ee5ac05dfef82",
"tests/boundary/mcp/javascriptNativeHandoffIdentity.test.ts": "fe216875d7bc080ddcc72a3ae3da38d0120f918ad1d6d5caa2b41edbc4796ddb"
},
"cohorts": {
"baseline": {
"available": {
"result": {
"artifact": {
"path": "/tmp/rea-native-handoff-20261015/cases/available/app.asar",
"sha256": "767df409b18effe60421fbefcca873de237c7e813eac744ecdeebbc5e825a33a"
},
"addon_path": "node_modules/keytar/build/Release/keytar.node",
"companion_sha256_observed": "0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a",
"prior_native_sha256_supplied": "0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a",
"source_paths": ["package.json"],
"parent_evidence_id": "ev_7d6754f5db07c44889b44ba2a14d235db79b94e9967c8ad36fe6b759615d0b7b",
"trace_evidence_id": "ev_2b1e20e64bf4aef770a556032dd72d70339baba21dc4f4ef8b34601b5ab55051",
"preparation_ms": 38140.725152,
"samples": [
{
"round": 0,
"elapsed_ms": 150.19293800000014,
"structured_reply_bytes": 12372,
"full_tool_reply_bytes": 25845
},
{
"round": 1,
"elapsed_ms": 108.26803500000096,
"structured_reply_bytes": 12372,
"full_tool_reply_bytes": 25845
},
{
"round": 2,
"elapsed_ms": 93.04797500000132,
"structured_reply_bytes": 12372,
"full_tool_reply_bytes": 25845
}
],
"safe_identity": true,
"node": {
"node_id": "jag_node_98ccdef0e85d67cba9cc843193c5ba877f0a73ba3fa7d3581f6db0396a707b2d",
"identity": {
"strategy": "content-digest",
"stability": "global-exact",
"sha256": "0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a"
},
"unavailable_observed": false,
"basis": [
{
"authority": "artifact-bytes",
"state": "observed",
"confidence": "exact",
"artifact": {
"available": true,
"artifact_id": "art_0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a",
"sha256": "0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a"
},
"location": {
"available": true,
"value": {
"kind": "artifact-path",
"path": "node_modules/keytar/build/Release/keytar.node"
}
}
}
]
},
"native_handoffs": [
{
"native_node_id": "jag_node_98ccdef0e85d67cba9cc843193c5ba877f0a73ba3fa7d3581f6db0396a707b2d",
"artifact_sha256": "0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a",
"artifact_path": "node_modules/keytar/build/Release/keytar.node",
"export_node_ids": [],
"requested_exports": [],
"status": "evidence-linked",
"providers": [
{
"id": "ghidra",
"name": "Ghidra",
"version": "simulated"
}
],
"evidence_ids": [
"ev_c1bf000c14a18445db1f834b1c6019ae04725dd948951d5b5079184b4524e8d7"
],
"recommended_tools": [
"open_binary",
"binary_overview",
"search_procedures",
"analyze_function",
"xrefs"
]
}
],
"evidence_links": [
"ev_7d6754f5db07c44889b44ba2a14d235db79b94e9967c8ad36fe6b759615d0b7b",
"ev_c1bf000c14a18445db1f834b1c6019ae04725dd948951d5b5079184b4524e8d7"
],
"source_coverage": {
"status": "partial",
"source_graph_status": "partial",
"total_seed_matches": 3
},
"graph_coverage": {
"status": "partial",
"truncated": false,
"omitted_count": null,
"limits": []
},
"facts_sha256": "539049c79671407c82040fd9ce443141c78fca5403daadbaf5ca82678fd0c933",
"cli_parity": {
"exact_cli_mcp_trace_parity": true,
"evidence_id": "ev_2b1e20e64bf4aef770a556032dd72d70339baba21dc4f4ef8b34601b5ab55051"
},
"token_costs": {
"tokenizer": "cl100k_base",
"tiktoken_version": "0.12.0",
"selected_catalog": 5570,
"full_catalog": 195522,
"requests": 601,
"structured_replies": 6169,
"full_tool_replies": 12735,
"selected_catalog_structured_task": 12340,
"full_catalog_structured_task": 202292,
"selected_catalog_full_reply_task": 18906,
"full_catalog_full_reply_task": 208858
}
},
"resources": {
"elapsed_seconds": 60.369,
"cpu_seconds": 59.80667,
"peak_cgroup_bytes": 2662629376,
"payload_cleanup_verified": true,
"events_at_payload_exit": {
"memory.events": {
"low": 0,
"high": 0,
"max": 0,
"oom": 0,
"oom_kill": 0,
"oom_group_kill": 0
},
"pids.events": {
"max": 0
}
}
}
},
"missing": {
"result": {
"artifact": {
"path": "/tmp/rea-native-handoff-20261015/cases/missing/app.asar",
"sha256": "767df409b18effe60421fbefcca873de237c7e813eac744ecdeebbc5e825a33a"
},
"addon_path": "node_modules/keytar/build/Release/keytar.node",
"companion_sha256_observed": null,
"prior_native_sha256_supplied": "0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a",
"source_paths": ["package.json"],
"parent_evidence_id": "ev_ac00ab67200361a181e08d358b591983616044f39c972ee81e65e49a0d8a0536",
"trace_evidence_id": "ev_7bc771bc1fc4b3eb1a666107bd9a49daddcfd7c90f048414f11862a3ca5f3f84",
"preparation_ms": 36053.453958,
"samples": [
{
"round": 0,
"elapsed_ms": 145.345276,
"structured_reply_bytes": 10008,
"full_tool_reply_bytes": 20875
},
{
"round": 1,
"elapsed_ms": 99.91117400000076,
"structured_reply_bytes": 10008,
"full_tool_reply_bytes": 20875
},
{
"round": 2,
"elapsed_ms": 89.61581300000398,
"structured_reply_bytes": 10008,
"full_tool_reply_bytes": 20875
}
],
"safe_identity": false,
"node": {
"node_id": "jag_node_dedeb2467dfe8cf75eee6588ce33416450e2c02cd67fb8ddff784449a2ec67f0",
"identity": {
"strategy": "canonical-path",
"stability": "artifact-version",
"artifact_sha256": "767df409b18effe60421fbefcca873de237c7e813eac744ecdeebbc5e825a33a",
"path": "node_modules/keytar/build/Release/keytar.node"
},
"unavailable_observed": true,
"basis": [
{
"authority": "artifact-bytes",
"state": "observed",
"confidence": "exact",
"artifact": {
"available": true,
"artifact_id": "art_767df409b18effe60421fbefcca873de237c7e813eac744ecdeebbc5e825a33a",
"sha256": "767df409b18effe60421fbefcca873de237c7e813eac744ecdeebbc5e825a33a"
},
"location": {
"available": true,
"value": {
"kind": "artifact-path",
"path": "node_modules/keytar/build/Release/keytar.node"
}
}
}
]
},
"native_handoffs": [
{
"native_node_id": "jag_node_dedeb2467dfe8cf75eee6588ce33416450e2c02cd67fb8ddff784449a2ec67f0",
"artifact_sha256": "767df409b18effe60421fbefcca873de237c7e813eac744ecdeebbc5e825a33a",
"artifact_path": "node_modules/keytar/build/Release/keytar.node",
"export_node_ids": [],
"requested_exports": [],
"status": "evidence-linked",
"providers": [
{
"id": "ghidra",
"name": "Ghidra",
"version": "simulated"
}
],
"evidence_ids": [
"ev_a67558e076894c3b7d339257765f22d66987cbcef411bf92d1dc50db2f4521ca"
],
"recommended_tools": [
"open_binary",
"binary_overview",
"search_procedures",
"analyze_function",
"xrefs"
]
}
],
"evidence_links": [
"ev_a67558e076894c3b7d339257765f22d66987cbcef411bf92d1dc50db2f4521ca",
"ev_ac00ab67200361a181e08d358b591983616044f39c972ee81e65e49a0d8a0536"
],
"source_coverage": {
"status": "partial",
"source_graph_status": "partial",
"total_seed_matches": 2
},
"graph_coverage": {
"status": "partial",
"truncated": false,
"omitted_count": null,
"limits": []
},
"facts_sha256": "992f22f9f4979b07bd17ca5ef6c000d31ab6bab8dcbd52d330214bc92b8456b4",
"cli_parity": {
"exact_cli_mcp_trace_parity": true,
"evidence_id": "ev_7bc771bc1fc4b3eb1a666107bd9a49daddcfd7c90f048414f11862a3ca5f3f84"
},
"token_costs": {
"tokenizer": "cl100k_base",
"tiktoken_version": "0.12.0",
"selected_catalog": 5570,
"full_catalog": 195522,
"requests": 594,
"structured_replies": 5208,
"full_tool_replies": 10789,
"selected_catalog_structured_task": 11372,
"full_catalog_structured_task": 201324,
"selected_catalog_full_reply_task": 16953,
"full_catalog_full_reply_task": 206905
}
},
"resources": {
"elapsed_seconds": 57.93,
"cpu_seconds": 57.479109,
"peak_cgroup_bytes": 2719457280,
"payload_cleanup_verified": true,
"events_at_payload_exit": {
"memory.events": {
"low": 0,
"high": 0,
"max": 0,
"oom": 0,
"oom_kill": 0,
"oom_group_kill": 0
},
"pids.events": {
"max": 0
}
}
}
}
},
"final": {
"available": {
"result": {
"artifact": {
"path": "/tmp/rea-native-handoff-20261015/cases/available/app.asar",
"sha256": "767df409b18effe60421fbefcca873de237c7e813eac744ecdeebbc5e825a33a"
},
"addon_path": "node_modules/keytar/build/Release/keytar.node",
"companion_sha256_observed": "0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a",
"prior_native_sha256_supplied": "0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a",
"source_paths": ["package.json"],
"parent_evidence_id": "ev_7d6754f5db07c44889b44ba2a14d235db79b94e9967c8ad36fe6b759615d0b7b",
"trace_evidence_id": "ev_2b1e20e64bf4aef770a556032dd72d70339baba21dc4f4ef8b34601b5ab55051",
"preparation_ms": 116767.19654199999,
"samples": [
{
"round": 0,
"elapsed_ms": 1120.7472280000075,
"structured_reply_bytes": 12372,
"full_tool_reply_bytes": 25845
},
{
"round": 1,
"elapsed_ms": 1173.7802859999938,
"structured_reply_bytes": 12372,
"full_tool_reply_bytes": 25845
},
{
"round": 2,
"elapsed_ms": 1782.2942279999988,
"structured_reply_bytes": 12372,
"full_tool_reply_bytes": 25845
}
],
"safe_identity": true,
"node": {
"node_id": "jag_node_98ccdef0e85d67cba9cc843193c5ba877f0a73ba3fa7d3581f6db0396a707b2d",
"identity": {
"strategy": "content-digest",
"stability": "global-exact",
"sha256": "0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a"
},
"unavailable_observed": false,
"basis": [
{
"authority": "artifact-bytes",
"state": "observed",
"confidence": "exact",
"artifact": {
"available": true,
"artifact_id": "art_0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a",
"sha256": "0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a"
},
"location": {
"available": true,
"value": {
"kind": "artifact-path",
"path": "node_modules/keytar/build/Release/keytar.node"
}
}
}
]
},
"native_handoffs": [
{
"native_node_id": "jag_node_98ccdef0e85d67cba9cc843193c5ba877f0a73ba3fa7d3581f6db0396a707b2d",
"artifact_sha256": "0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a",
"artifact_path": "node_modules/keytar/build/Release/keytar.node",
"export_node_ids": [],
"requested_exports": [],
"status": "evidence-linked",
"providers": [
{
"id": "ghidra",
"name": "Ghidra",
"version": "simulated"
}
],
"evidence_ids": [
"ev_c1bf000c14a18445db1f834b1c6019ae04725dd948951d5b5079184b4524e8d7"
],
"recommended_tools": [
"open_binary",
"binary_overview",
"search_procedures",
"analyze_function",
"xrefs"
]
}
],
"evidence_links": [
"ev_7d6754f5db07c44889b44ba2a14d235db79b94e9967c8ad36fe6b759615d0b7b",
"ev_c1bf000c14a18445db1f834b1c6019ae04725dd948951d5b5079184b4524e8d7"
],
"source_coverage": {
"status": "partial",
"source_graph_status": "partial",
"total_seed_matches": 3
},
"graph_coverage": {
"status": "partial",
"truncated": false,
"omitted_count": null,
"limits": []
},
"facts_sha256": "539049c79671407c82040fd9ce443141c78fca5403daadbaf5ca82678fd0c933",
"cli_parity": {
"exact_cli_mcp_trace_parity": true,
"evidence_id": "ev_2b1e20e64bf4aef770a556032dd72d70339baba21dc4f4ef8b34601b5ab55051"
},
"token_costs": {
"tokenizer": "cl100k_base",
"tiktoken_version": "0.12.0",
"selected_catalog": 5570,
"full_catalog": 195522,
"requests": 601,
"structured_replies": 6169,
"full_tool_replies": 12735,
"selected_catalog_structured_task": 12340,
"full_catalog_structured_task": 202292,
"selected_catalog_full_reply_task": 18906,
"full_catalog_full_reply_task": 208858
}
},
"resources": {
"elapsed_seconds": 258.885,
"cpu_seconds": 106.221003,
"peak_cgroup_bytes": 2678456320,
"payload_cleanup_verified": true,
"events_at_payload_exit": {
"memory.events": {
"low": 0,
"high": 0,
"max": 0,
"oom": 0,
"oom_kill": 0,
"oom_group_kill": 0
},
"pids.events": {
"max": 0
}
}
}
},
"missing": {
"result": {
"artifact": {
"path": "/tmp/rea-native-handoff-20261015/cases/missing/app.asar",
"sha256": "767df409b18effe60421fbefcca873de237c7e813eac744ecdeebbc5e825a33a"
},
"addon_path": "node_modules/keytar/build/Release/keytar.node",
"companion_sha256_observed": null,
"prior_native_sha256_supplied": "0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a",
"source_paths": ["package.json"],
"parent_evidence_id": "ev_ac00ab67200361a181e08d358b591983616044f39c972ee81e65e49a0d8a0536",
"trace_evidence_id": "ev_3931e0874b0cffffa10cfe0124d218f09e6b7edbdda789591a7593060afd6450",
"preparation_ms": 36650.457516,
"samples": [
{
"round": 0,
"elapsed_ms": 156.684454000002,
"structured_reply_bytes": 9298,
"full_tool_reply_bytes": 19401
},
{
"round": 1,
"elapsed_ms": 100.968246000004,
"structured_reply_bytes": 9298,
"full_tool_reply_bytes": 19401
},
{
"round": 2,
"elapsed_ms": 90.89984700000059,
"structured_reply_bytes": 9298,
"full_tool_reply_bytes": 19401
}
],
"safe_identity": true,
"node": {
"node_id": "jag_node_dedeb2467dfe8cf75eee6588ce33416450e2c02cd67fb8ddff784449a2ec67f0",
"identity": {
"strategy": "canonical-path",
"stability": "artifact-version",
"artifact_sha256": "767df409b18effe60421fbefcca873de237c7e813eac744ecdeebbc5e825a33a",
"path": "node_modules/keytar/build/Release/keytar.node"
},
"unavailable_observed": true,
"basis": [
{
"authority": "artifact-bytes",
"state": "observed",
"confidence": "exact",
"artifact": {
"available": true,
"artifact_id": "art_767df409b18effe60421fbefcca873de237c7e813eac744ecdeebbc5e825a33a",
"sha256": "767df409b18effe60421fbefcca873de237c7e813eac744ecdeebbc5e825a33a"
},
"location": {
"available": true,
"value": {
"kind": "artifact-path",
"path": "node_modules/keytar/build/Release/keytar.node"
}
}
}
]
},
"native_handoffs": [],
"evidence_links": [
"ev_ac00ab67200361a181e08d358b591983616044f39c972ee81e65e49a0d8a0536"
],
"source_coverage": {
"status": "partial",
"source_graph_status": "partial",
"total_seed_matches": 2
},
"graph_coverage": {
"status": "partial",
"truncated": false,
"omitted_count": null,
"limits": []
},
"facts_sha256": "aae3c060eb63eb75816c4fb6e552eac6055c8195ae4d1e5e9d4c5125618ce2a0",
"cli_parity": {
"exact_cli_mcp_trace_parity": true,
"evidence_id": "ev_3931e0874b0cffffa10cfe0124d218f09e6b7edbdda789591a7593060afd6450"
},
"token_costs": {
"tokenizer": "cl100k_base",
"tiktoken_version": "0.12.0",
"selected_catalog": 5570,
"full_catalog": 195522,
"requests": 594,
"structured_replies": 4939,
"full_tool_replies": 10237,
"selected_catalog_structured_task": 11103,
"full_catalog_structured_task": 201055,
"selected_catalog_full_reply_task": 16401,
"full_catalog_full_reply_task": 206353
}
},
"resources": {
"elapsed_seconds": 59.738,
"cpu_seconds": 59.254776,
"peak_cgroup_bytes": 2571235328,
"payload_cleanup_verified": true,
"events_at_payload_exit": {
"memory.events": {
"low": 0,
"high": 0,
"max": 0,
"oom": 0,
"oom_kill": 0,
"oom_group_kill": 0
},
"pids.events": {
"max": 0
}
}
}
}
}
},
"resource_policy": {
"hard_bytes": 8589934592,
"early_stop_bytes": 6442450944,
"cpu_quota_percent": 100,
"cpu_affinity": [15],
"memory_accounting": "Cgroup family peak includes charged file cache; not summed RSS. Counters at payload exit while observer remains alive, not final whole-scope counters.",
"cache_conditions": "Input is stream-hashed before analysis, warming its file cache. Builds and OS caches uncontrolled; fresh MCP process is not an OS-cold run.",
"performance_scope": "Whole verifier includes input hashing, preparation, repeated queries, export, CLI parity and tokenization. Per-query samples are wall times only; isolated query CPU/memory and hosted-model costs unmeasured. Final available control258.885s wall/106.221003s CPU is substantially slower than baseline60.369s/59.806670s; final missing control59.738s/59.254776s and prior postfix controls are separately preserved. Timing/resource variability is unresolved, not attributed to this native consumer change. No speedup or performance-equivalence claim."
},
"observer_sources_sha256": {
"resource-run.py": "7728862171415e7dee2c11af2ead2b9a54265fccaf82a7113956d36b29065e33",
"resource_payload.py": "6f089e645459eba80c5d73e39c21606c78173a44daf49fabc3b88c4631ce51c6"
},
"validation": {
"harness_attempt": "Initial CLI trace input incorrectly used the MCP inline selector wrapper; both cases rejected before identity assertions. Corrected to the CLI complete-Evidence contract. Not a product reproduction.",
"baseline_public": "Missing-companion failed / available-byte control passed. Both adapters and both native-observation selections executed before identity assertions.",
"initial_focused": "24 passed in four files including public CLI/stdio MCP, workflow/graph, missing companion imports and erased TypeScript native bindings.",
"first_static": "Other static gates passed, typecheck rejected architecture:null in test factory. Omitted optional field; all four real-case normalized simulated Evidence inputs proved byte-identical. No product behavior change.",
"final_public": "2/2 public CLI/stdio MCP cases passed after named summary parsing and optional architecture correction; overlaps initial 24-case selection.",
"final_static_docs": "npm run check && npm run docs:check passed on integration base62bf098 plus this final change; typecheck, lint, format, knip, metadata, architecture/module boundaries and docs checks passed, including5 consistency tests. Prior static attempt/failure retained separately.",
"synced_cli_workflows": "34 passed in tests/acceptance/applications/applicationWorkflowCli.test.ts after sync to62bf098; adds a fifth file and34 distinct cases to initial24 (58 total distinct focused cases)."
},
"interpretation": "Unavailable case previously returned a successful transport response with incorrect identity/linkage; this is not a successful equivalent analyst task and earns no efficiency credit. Available case is the valid completed-equivalence control. Reduced missing-case bytes/tokens reflect removal of unsupported claims, not an independent efficiency gain.",
"verifier_conditions": "Fresh MCP session, one selected analysis followed by repeated identical retained traces. Filesystem/build caches uncontrolled. Task token counts include one analysis summary and one trace with name/description/inputSchema catalog projections; structured and complete-tool-reply projections are alternatives, not billing. Repeated rounds, export, CLI parity and tokenizer are validation overhead outside that one-task token count but inside total resource receipts. A wrong-identity baseline is not a successful equivalent task or efficiency credit.",
"verifier_scope": "Real shipped-ASAR native identity through public CLI/stdio MCP; simulated native Evidence only, no provider/application executed",
"integration_base_revision": "62bf09809ef7bb224028916424f8f07652a20f4f",
"upstream_sync": "Fast-forwarded to reviewed main62bf098. Six upstream commits change CLI acceptance plus Apple, browser type-import parsing, reference JSON resolution and Kuna caching; no owned/key native source files overlap. Native source hashes unchanged. Updated public workflow acceptance34/34 passed; both real controls repeated on this integration base. Final static/docs gates recorded separately.",
"prior_postfix_controls": {
"available": {
"result": {
"artifact": {
"path": "/tmp/rea-native-handoff-20261015/cases/available/app.asar",
"sha256": "767df409b18effe60421fbefcca873de237c7e813eac744ecdeebbc5e825a33a"
},
"addon_path": "node_modules/keytar/build/Release/keytar.node",
"companion_sha256_observed": "0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a",
"prior_native_sha256_supplied": "0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a",
"source_paths": ["package.json"],
"parent_evidence_id": "ev_7d6754f5db07c44889b44ba2a14d235db79b94e9967c8ad36fe6b759615d0b7b",
"trace_evidence_id": "ev_2b1e20e64bf4aef770a556032dd72d70339baba21dc4f4ef8b34601b5ab55051",
"preparation_ms": 37729.472507,
"samples": [
{
"round": 0,
"elapsed_ms": 157.96848200000386,
"structured_reply_bytes": 12372,
"full_tool_reply_bytes": 25845
},
{
"round": 1,
"elapsed_ms": 114.56066299999657,
"structured_reply_bytes": 12372,
"full_tool_reply_bytes": 25845
},
{
"round": 2,
"elapsed_ms": 99.90600200000335,
"structured_reply_bytes": 12372,
"full_tool_reply_bytes": 25845
}
],
"safe_identity": true,
"node": {
"node_id": "jag_node_98ccdef0e85d67cba9cc843193c5ba877f0a73ba3fa7d3581f6db0396a707b2d",
"identity": {
"strategy": "content-digest",
"stability": "global-exact",
"sha256": "0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a"
},
"unavailable_observed": false,
"basis": [
{
"authority": "artifact-bytes",
"state": "observed",
"confidence": "exact",
"artifact": {
"available": true,
"artifact_id": "art_0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a",
"sha256": "0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a"
},
"location": {
"available": true,
"value": {
"kind": "artifact-path",
"path": "node_modules/keytar/build/Release/keytar.node"
}
}
}
]
},
"native_handoffs": [
{
"native_node_id": "jag_node_98ccdef0e85d67cba9cc843193c5ba877f0a73ba3fa7d3581f6db0396a707b2d",
"artifact_sha256": "0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a",
"artifact_path": "node_modules/keytar/build/Release/keytar.node",
"export_node_ids": [],
"requested_exports": [],
"status": "evidence-linked",
"providers": [
{
"id": "ghidra",
"name": "Ghidra",
"version": "simulated"
}
],
"evidence_ids": [
"ev_c1bf000c14a18445db1f834b1c6019ae04725dd948951d5b5079184b4524e8d7"
],
"recommended_tools": [
"open_binary",
"binary_overview",
"search_procedures",
"analyze_function",
"xrefs"
]
}
],
"evidence_links": [
"ev_7d6754f5db07c44889b44ba2a14d235db79b94e9967c8ad36fe6b759615d0b7b",
"ev_c1bf000c14a18445db1f834b1c6019ae04725dd948951d5b5079184b4524e8d7"
],
"source_coverage": {
"status": "partial",
"source_graph_status": "partial",
"total_seed_matches": 3
},
"graph_coverage": {
"status": "partial",
"truncated": false,
"omitted_count": null,
"limits": []
},
"facts_sha256": "539049c79671407c82040fd9ce443141c78fca5403daadbaf5ca82678fd0c933",
"cli_parity": {
"exact_cli_mcp_trace_parity": true,
"evidence_id": "ev_2b1e20e64bf4aef770a556032dd72d70339baba21dc4f4ef8b34601b5ab55051"
},
"token_costs": {
"tokenizer": "cl100k_base",
"tiktoken_version": "0.12.0",
"selected_catalog": 5570,
"full_catalog": 195522,
"requests": 601,
"structured_replies": 6169,
"full_tool_replies": 12735,
"selected_catalog_structured_task": 12340,
"full_catalog_structured_task": 202292,
"selected_catalog_full_reply_task": 18906,
"full_catalog_full_reply_task": 208858
}
},
"resources": {
"elapsed_seconds": 61.657,
"cpu_seconds": 61.135962,
"peak_cgroup_bytes": 3146776576,
"payload_cleanup_verified": true,
"events_at_payload_exit": {
"memory.events": {
"low": 0,
"high": 0,
"max": 0,
"oom": 0,
"oom_kill": 0,
"oom_group_kill": 0
},
"pids.events": {
"max": 0
}
}
}
},
"missing": {
"result": {
"artifact": {
"path": "/tmp/rea-native-handoff-20261015/cases/missing/app.asar",
"sha256": "767df409b18effe60421fbefcca873de237c7e813eac744ecdeebbc5e825a33a"
},
"addon_path": "node_modules/keytar/build/Release/keytar.node",
"companion_sha256_observed": null,
"prior_native_sha256_supplied": "0700016bcd761cbe02d275f2046c7cc42f39f730a50d66e3d3307aa9d413373a",
"source_paths": ["package.json"],
"parent_evidence_id": "ev_ac00ab67200361a181e08d358b591983616044f39c972ee81e65e49a0d8a0536",
"trace_evidence_id": "ev_3931e0874b0cffffa10cfe0124d218f09e6b7edbdda789591a7593060afd6450",
"preparation_ms": 51944.249193999996,
"samples": [
{
"round": 0,
"elapsed_ms": 140.67567200000485,
"structured_reply_bytes": 9298,
"full_tool_reply_bytes": 19401
},
{
"round": 1,
"elapsed_ms": 105.40526200000022,
"structured_reply_bytes": 9298,
"full_tool_reply_bytes": 19401
},
{
"round": 2,
"elapsed_ms": 88.52443199999834,
"structured_reply_bytes": 9298,
"full_tool_reply_bytes": 19401
}
],
"safe_identity": true,
"node": {
"node_id": "jag_node_dedeb2467dfe8cf75eee6588ce33416450e2c02cd67fb8ddff784449a2ec67f0",
"identity": {
"strategy": "canonical-path",
"stability": "artifact-version",
"artifact_sha256": "767df409b18effe60421fbefcca873de237c7e813eac744ecdeebbc5e825a33a",
"path": "node_modules/keytar/build/Release/keytar.node"
},
"unavailable_observed": true,
"basis": [
{
"authority": "artifact-bytes",
"state": "observed",
"confidence": "exact",
"artifact": {
"available": true,
"artifact_id": "art_767df409b18effe60421fbefcca873de237c7e813eac744ecdeebbc5e825a33a",
"sha256": "767df409b18effe60421fbefcca873de237c7e813eac744ecdeebbc5e825a33a"
},
"location": {
"available": true,
"value": {
"kind": "artifact-path",
"path": "node_modules/keytar/build/Release/keytar.node"
}
}
}
]
},
"native_handoffs": [],
"evidence_links": [
"ev_ac00ab67200361a181e08d358b591983616044f39c972ee81e65e49a0d8a0536"
],
"source_coverage": {
"status": "partial",
"source_graph_status": "partial",
"total_seed_matches": 2
},
"graph_coverage": {
"status": "partial",
"truncated": false,
"omitted_count": null,
"limits": []
},
"facts_sha256": "aae3c060eb63eb75816c4fb6e552eac6055c8195ae4d1e5e9d4c5125618ce2a0",
"cli_parity": {
"exact_cli_mcp_trace_parity": true,
"evidence_id": "ev_3931e0874b0cffffa10cfe0124d218f09e6b7edbdda789591a7593060afd6450"
},
"token_costs": {
"tokenizer": "cl100k_base",
"tiktoken_version": "0.12.0",
"selected_catalog": 5570,
"full_catalog": 195522,
"requests": 594,
"structured_replies": 4939,
"full_tool_replies": 10237,
"selected_catalog_structured_task": 11103,
"full_catalog_structured_task": 201055,
"selected_catalog_full_reply_task": 16401,
"full_catalog_full_reply_task": 206353
}
},
"resources": {
"elapsed_seconds": 74.956,
"cpu_seconds": 60.352428,
"peak_cgroup_bytes": 3124801536,
"payload_cleanup_verified": true,
"events_at_payload_exit": {
"memory.events": {
"low": 0,
"high": 0,
"max": 0,
"oom": 0,
"oom_kill": 0,
"oom_group_kill": 0
},
"pids.events": {
"max": 0
}
}
}
}
},
"prior_postfix_controls_note": "Executed before upstream sync, on base9f8659e plus this native fix. Retained, not asserted as a final-integration measurement.",
"validation_resources": {
"synced_cli_34": {
"elapsed_seconds": 240.873,
"cpu_seconds": 141.092204,
"peak_cgroup_bytes": 3220983808,
"payload_cleanup_verified": true,
"events_at_payload_exit": {
"memory.events": {
"low": 0,
"high": 0,
"max": 0,
"oom": 0,
"oom_kill": 0,
"oom_group_kill": 0
},
"pids.events": {
"max": 0
}
}
},
"initial_focused_24": {
"elapsed_seconds": 86.733,
"cpu_seconds": 85.48165,
"peak_cgroup_bytes": 3216478208,
"payload_cleanup_verified": true,
"events_at_payload_exit": {
"memory.events": {
"low": 0,
"high": 0,
"max": 0,
"oom": 0,
"oom_kill": 0,
"oom_group_kill": 0
},
"pids.events": {
"max": 0
}
}
},
"final_public_2": {
"elapsed_seconds": 78.183,
"cpu_seconds": 32.274966,
"peak_cgroup_bytes": 1365196800,
"payload_cleanup_verified": true,
"events_at_payload_exit": {
"memory.events": {
"low": 0,
"high": 0,
"max": 0,
"oom": 0,
"oom_kill": 0,
"oom_group_kill": 0
},
"pids.events": {
"max": 0
}
}
},
"prior_static_docs": {
"elapsed_seconds": 169.015,
"cpu_seconds": 119.713,
"peak_cgroup_bytes": 4265230336,
"payload_cleanup_verified": true,
"events_at_payload_exit": {
"memory.events": {
"low": 0,
"high": 0,
"max": 0,
"oom": 0,
"oom_kill": 0,
"oom_group_kill": 0
},
"pids.events": {
"max": 0
}
}
},
"final_integration_static_docs": {
"elapsed_seconds": 128.732,
"cpu_seconds": 115.51892,
"peak_cgroup_bytes": 4301684736,
"payload_cleanup_verified": true,
"events_at_payload_exit": {
"memory.events": {
"low": 0,
"high": 0,
"max": 0,
"oom": 0,
"oom_kill": 0,
"oom_group_kill": 0
},
"pids.events": {
"max": 0
}
}
}
},
"integration_equivalence": "Final controls on62bf098 preserve all recorded available-case artifact, identity, facts, Evidence, coverage and token fields from baseline; missing-case parent/node/provenance/coverage unchanged, handoff/container link removed. Both exactly equal the earlier postfix controls in all recorded non-timing contract fields.",
"boundary_audit": "Unavailable native producer owns canonical-path identity and archive-backed observations; native handoff derivation now consumes only its content-digest identity. Feature trace is the only production caller. Application-version matching/content comparison already consume canonical identity rather than a supporting observation digest; no duplicate fallback found there. CLI/MCP use the same application workflow."
}
Reference in new issue View Git Blame Copy Permalink